Privacy-Enhancing Technologies CDPSE Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard

   A government agency wants to release a dataset of census responses for public research. The dataset includes age, gender, occupation, and postal code. The agency must ensure that the data is anonymized to prevent re-identification. A privacy impact assessment has identified that certain combinations of these attributes are unique in small populations. What is the most effective anonymization technique to address this risk?

   • ARemove the postal code field entirely from the dataset.
   • BReplace names with pseudonyms and keep the mapping table secure.
   • CGeneralize postal codes to a broader region, such as the first three digits.
   • DAdd random noise to the age and occupation fields.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   What is a key requirement for a valid cookie consent mechanism?

   • AIt must allow users to withdraw consent as easily as they gave it
   • BIt must store consent preferences on the server only
   • CIt must block all cookies, including essential ones, until consent is given
   • DIt must automatically accept all cookies by default
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   What is the primary function of a cookie in web browsing?

   • ATo encrypt all network traffic between the browser and server
   • BTo remember stateful information about the user's visit, such as login status or preferences
   • CTo block third-party tracking scripts from running on the page
   • DTo store personal data on the server for permanent retention
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A consortium of hospitals wants to collaboratively train a machine learning model to predict patient readmission rates. Due to data residency regulations, patient data cannot leave each hospital's network. The hospitals need to benefit from a model trained on all their data without sharing raw patient records. Which privacy-enhancing technology is most appropriate for this scenario?

   • AUse differential privacy to add noise to the patient data before sharing it.
   • BUse homomorphic encryption to encrypt all patient data and send it to a central server for training.
   • CUse federated learning, where each hospital trains the model locally and shares only model updates.
   • DAnonymize the patient data at each hospital and then share the anonymized datasets.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   When selecting a Privacy-Enhancing Technology, what is a key factor to consider?

   • AThe color scheme of the user interface
   • BThe number of employees in the organization
   • CThe specific data processing context and associated risks
   • DThe age of the data subjects
   Reveal Solution Discussion Select an answer first